Privacy Policy

Hart Apps LLC (“Hart Apps,” “we,” “us”), a Virginia limited liability company, operates Monument Maker (the “Service”). This Privacy Policy states how we collect, use, disclose, and keep personal information when you visit the site, open an account, or use the Service. It is incorporated into the Terms of Service. If you do not agree, do not use the Service.

For accounts, billing, sign-in, security, and operation of the Service, Hart Apps decides the purposes and means of processing. For names, dates, photographs, designs, and other material an account holder submits about a family or a memorial, Hart Apps processes that material to provide the Service on the account holder’s instructions. The account holder is responsible for having a lawful basis to collect that material and for telling the family how it will be used. Hart Apps does not decide the price, the design, or the sale.

Depending on how you use the Service, we collect:

• Account information: name, email, company name, role, and the fact that you accepted the Terms and this Policy, including the time and the document version.
• Identity information: a photograph of your driver’s license, the result of a name comparison, and related status. Hart Apps operators can open the photograph. It is not shown to families or to other companies.
• Sign-in information: credentials are held by the sign-in provider Hart Apps uses. Hart Apps receives the result of sign-in, not your password in the Monument Maker database.
• Billing information: plan, invoices, subscription status, and promotion codes. Card and bank numbers are collected by Stripe. Hart Apps does not store full card numbers.
• Memorial information you submit: designs, names, dates, verses, cemetery choices, prices, and photographs a family or account holder provides.
• Payment records for charges placed through the Service: amount, status, and payer name and email as entered on a bill. Not the full card number.
• Technical information: IP address, browser type, device data, pages requested, and logs needed to run and protect the Service.
• Messages you send to Hart Apps, including support mail.

We do not ask for Social Security numbers, medical records, or payment-card data in Monument Maker forms. If you type that kind of information into a design or a note, you do so at your own risk and you are responsible for whether that was lawful.

We use information to:

• Open and run accounts, seats, and subscriptions.
• Confirm that the name on a driver’s license matches the name on the account.
• Show designs, bills, and account screens to the people allowed to see them.
• Send invitations, payment links, and other messages you ask the Service to send.
• Charge plans and record payments processed by Stripe.
• Detect fraud, enforce the Terms, and protect Hart Apps, account holders, and families.
• Comply with law and respond to lawful requests.
• Keep the Service working and understand failures and abuse.

Where a law requires a legal basis, we rely on the contract with you, our legitimate interests in security and operating the Service, legal duties, and consent where the Service asks for it. We do not sell personal information. We do not use memorial designs or license photographs to train public models.

A license photograph is collected only to open an account and to check identity. Hart Apps stores the file for operator review. Hart Apps may transmit it, or data extracted from it, to Stripe Identity for a name comparison. We do not use it for advertising. We do not show it on a family page or on another company’s account. Access inside Hart Apps is limited to people operating the Service. We keep it while the account exists and afterward for as long as we need it to resolve a dispute, meet a legal duty, or prevent repeat abuse, and then we delete or block it in the ordinary course.

We do not sell personal information. We share it only as follows:

• Stripe, for subscription billing, identity comparison, and memorial charges placed through the Service, under Stripe’s terms.
• The sign-in provider that authenticates account logins.
• The email provider that sends messages you or the Service initiate.
• Other people on the same account, according to the role they have. A company sees its own people and orders. A salesperson sees the memorials on that login.
• A family member who is sent a payment link receives what that link needs in order to pay the amount stated. The link is not a full copy of the account.
• A monument company that an account holder asks to approve designs or payments receives the request sent to the address the account holder supplied.
• Hosting and infrastructure providers that store and transmit the Service under confidentiality duties.
• Authorities when the law, a subpoena, or a court requires it, or when needed to protect rights and safety.
• A buyer of Hart Apps’ business, if the Service is transferred, under this Policy or a successor policy that offers equivalent protection.

Names of decedents, family contact details, and design photographs are treated as private account material. They are not published as public profiles. Public pages of the marketing site do not list those records. We ask automated crawlers not to index design, account, and programming routes. That request is not a guarantee that a third party will comply.

Photographs supplied for a portrait or carving are used for that memorial only when the account holder records that the family allowed it. Hart Apps does not independently contact every family. The account holder is responsible for that permission.

We use cookies and similar storage for sign-in, security, and preferences. The Service does not respond to “Do Not Track” signals in one uniform way, because there is no settled standard. If you block cookies, sign-in and billing may not work. Server logs are kept for security and operations.

We keep information while the account is open and afterward as needed for disputes, unpaid amounts, fraud prevention, backups, and legal duties. You should export anything you need before you close an account. Hart Apps may delete material after closure without notice once those needs end.

We use administrative and technical measures designed to protect information, including access limits on license photographs and reliance on Stripe for card data. No method of storage or transmission is perfectly secure. Hart Apps does not guarantee that unauthorized access will never occur. You are responsible for the security of your password and for the people you invite onto an account.

If we learn of a security incident affecting personal information and a law requires notice, we will give the notice that law requires. This Policy is not a promise of a particular security certification, and Hart Apps does not claim HIPAA, SOC 2, or any other certification on this page.

Hart Apps is in the United States. Information is processed in the United States and in other countries where our providers operate. Those countries may not give the same protection as your own. If you use the Service, you understand that transfer and processing.

Depending on where you live, you may have a right to access, correct, or delete personal information, or to appeal a refusal. Virginia residents may have rights under the Virginia Consumer Data Protection Act, including access, correction, deletion, and a copy in portable form. California residents may have rights under the California Consumer Privacy Act. Hart Apps does not sell personal information and does not share it for cross-context behavioral advertising.

Send a request to hello@hartapps.com. We will verify the request and respond within the time the applicable law requires, often 45 days, with any extension that law allows. We may refuse a request where the law allows, including where honoring it would reveal another person’s information, break a legal hold, or prevent us from completing a transaction or detecting fraud. License photographs and billing records may be kept when we still need them for those reasons.

Closing an account does not by itself erase records we must keep. Marketing email, if we send any, will include a way to stop it. Service messages about a bill, an invitation, or security are not marketing.

The Service is for adults opening accounts and for families designing a memorial with them. We do not knowingly create accounts for anyone under 18. If you believe a child gave us personal information, write to hello@hartapps.com and we will delete it if the law allows.

We may update this Policy by posting a new version on this page with a new date. The new version applies when posted unless it states a later date. If you keep using the Service after that date, you accept the update. If you do not accept it, stop using the Service.

Privacy requests and questions: hello@hartapps.com. Hart Apps LLC, Commonwealth of Virginia, United States.